Security
Heretic - Bot mitigation and fraud prevention
Heretic uses advanced telemetry and physics to detect abuse, escalating to a passkey-signed mobile challenge that costs a fraction of an SMS OTP while being infinitely more effective.
- Category
- Security
- Stage
- Beta
- For
- Developers and security teams protecting signups, forms, and other web actions from automated or spoofed browsers.
- Pricing
- Plan Monthly Probes Challenges Sandbox Free 1,000 1,000 Signal $50 25,000 5,000 Anomaly $350 250,000 50,000 Incursion $1,250 1,000,000 200,000 Scale $5,600 5,000,000 1,000,000 Enterprise Contact for quote 1M+ to unmetered 1M+ to unmetered
About
Heretic uses physics to unmask an attacker, returns you a verdict along with the data and let's you decide, with an option to escalate to a passkey-signed mobile device challenge that's cheaper and more effective than SMS OTP's.
Use cases
- Guarding promotion endpoints, signups, or front door scraping
Features
- Problem
- Browser declarations can be spoofed.
- How it works
- Checks claimed browser properties against network geometry, TCP/TLS/HTTP construction, compute workloads, and required QUIC attempts.
- Result
- Returns contradicted, refused, or uncontradicted verdicts with documented finding IDs and tiers.
- Why
- Connection observations and browser tests can expose conflicts that page-visible declarations alone cannot.
- Problem
- A score does not explain why a session was risky.
- How it works
- Reports absolute, composite, conditional, and weak findings individually.
- Result
- Backend policies can act on named contradictions rather than a cutoff score.
- Why
- Teams need evidence they can inspect and map to their own policies.
- Problem
- Incomplete checks should not be treated as successful verification.
- How it works
- Returns refused when an opened session misses required measurements; no result exists if no session opens.
- Result
- Backends can hold or reject actions until required verification completes.
- Why
- Protected actions need a fresh, completed assessment.
- Problem
- Some sessions need additional verification.
- How it works
- The widget can request a phone ceremony involving recorded motion, a timed workload, orientation changes, and a passkey signature.
- Result
- The backend receives passed, contradicted, or not_completed outcomes with device records and stopping steps.
- Why
- A policy can add a challenge for contradicted, refused, or otherwise selected sessions.
- Problem
- Teams need to investigate decisions and compare account attempts.
- How it works
- Provides immutable finalized results, ruleset provenance, site-scoped identifiers, and optional zero-retention reads.
- Result
- Teams can retain decision evidence or use a one-time read that is deleted after access.
- Why
- Results need context for auditing, while identifier matches remain conditional evidence.
- Problem
- Integration should not require traffic proxying.
- How it works
- Offers a browser collector and form widget that connect separately from application traffic, with backend verdict retrieval.
- Result
- Teams can measure visitors, read verdicts, or guard forms without routing application traffic through Heretic.
- Why
- Applications retain control of traffic and enforcement decisions.
What makes it different
- Heretic was built with the most unforgiving defense mechanism in the market, engineered by the very attackers it was designed to stop.
Product questions
What does Heretic - Bot mitigation and fraud prevention do?
Heretic is bot and device detection for protected web actions. It compares browser-reported claims with browser tests and independent connection observations, then returns a verdict with named findings for a backend to enforce.
Who is Heretic - Bot mitigation and fraud prevention for?
Developers and security teams protecting signups, forms, and other web actions from automated or spoofed browsers.
How much does Heretic - Bot mitigation and fraud prevention cost?
Plan Monthly Probes Challenges Sandbox Free 1,000 1,000 Signal $50 25,000 5,000 Anomaly $350 250,000 50,000 Incursion $1,250 1,000,000 200,000 Scale $5,600 5,000,000 1,000,000 Enterprise Contact for quote 1M+ to unmetered 1M+ to unmetered
What can I use Heretic - Bot mitigation and fraud prevention for?
- Guarding promotion endpoints, signups, or front door scraping
What makes Heretic - Bot mitigation and fraud prevention different?
- Heretic was built with the most unforgiving defense mechanism in the market, engineered by the very attackers it was designed to stop.
Screenshots
